net.box requires define password AND user. closes #545